MS-500 Endpoint Security & Device Management 3

Question 1

What is the key benefit of Intune App Protection Policies (APP) compared to device enrollment-based management?

Accepted Answer

They protect corporate data within apps on unmanaged (unenrolled) devices

Answer

They enforce full disk encryption on the device

Answer

They remotely wipe the entire device when data leakage is detected

Answer

They prevent users from installing unauthorized apps from the App Store

Question 2

Which Windows Autopilot deployment mode is designed for shared or kiosk devices with no user affinity that must configure themselves without any user interaction during setup?

Accepted Answer

Autopilot Self-Deploying Mode

Answer

User-driven Hybrid Azure AD Join

Answer

Pre-provisioning (White Glove) mode

Answer

Enrollment Status Page (ESP) only mode

Question 3

What query language does Microsoft Defender for Endpoint's Advanced Hunting feature use to search across endpoint telemetry and event data?

Accepted Answer

Kusto Query Language (KQL)

Answer

Structured Query Language (SQL)

Answer

Kibana Query Language (KQL/Lucene)

Answer

PowerShell DSL

Question 4

When BitLocker is enabled and managed through Microsoft Intune on a Windows device, where are BitLocker recovery keys stored for administrator retrieval?

Accepted Answer

Escrowed to Azure Active Directory (Azure AD) and visible in Intune

Answer

On the local device in a protected system folder

Answer

Sent to the user's email address automatically

Answer

Stored on a USB key designated by the admin

Question 5

Which Microsoft Defender for Endpoint plan includes Endpoint Detection and Response (EDR), Advanced Hunting with custom detections, and Threat and Vulnerability Management?

Accepted Answer

Microsoft Defender for Endpoint Plan 2 (P2)

Answer

Microsoft Defender Antivirus (built-in to Windows)

Answer

Microsoft Defender for Endpoint Plan 1 (P1)

Answer

Microsoft Defender for Business (SMB tier)

Question 6

What is the difference between a 'Full Wipe' and a 'Selective Wipe' action in Microsoft Intune?

Accepted Answer

Full Wipe factory resets the device; Selective Wipe removes only corporate apps and data while leaving personal data intact

Answer

Full Wipe removes corporate data; Selective Wipe factory resets the device

Answer

Both actions produce the same result on corporate-owned devices

Answer

Selective Wipe only works on iOS devices, while Full Wipe works on all platforms

Question 7

Which unified admin console is used to manage both Microsoft Intune and Microsoft Endpoint Configuration Manager (co-management) from a single web-based interface?

Accepted Answer

Microsoft Endpoint Manager admin center (endpoint.microsoft.com)

Answer

Azure portal (portal.azure.com)

Answer

Microsoft 365 admin center (admin.microsoft.com)

Answer

Microsoft 365 Defender portal (security.microsoft.com)